Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232312e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=
Subject key identifier:   47:C0:64:39:69:FA:5A:57:75:8D:4D:FE:C6:9A:41:13:80:55:38:D2
Certificate issuer:       /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial:       6BE3AA9C253B5E4A790CD2445CC1161E76FD5ACB
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232312e302f32342d3234203d3e203338313438.roa
Signing time:             Wed 16 Oct 2024 04:02:05 +0000
ROA not before:           Wed 16 Oct 2024 03:57:05 +0000
ROA not after:            Wed 15 Oct 2025 04:02:05 +0000
asID:                     38148
IP address blocks:        103.30.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
                          rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:aa:9c:25:3b:5e:4a:79:0c:d2:44:5c:c1:16:1e:76:fd:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
        Validity
            Not Before: Oct 16 03:57:05 2024 GMT
            Not After : Oct 15 04:02:05 2025 GMT
        Subject: CN=47C0643969FA5A57758D4DFEC69A4113805538D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:0f:45:f7:61:ac:5a:8f:e8:95:70:ea:fa:
                    4a:a7:e6:4e:5d:15:d6:23:8e:ef:40:a3:df:b1:1d:
                    ef:d0:34:5b:78:9d:63:f7:9d:ed:55:21:8c:cb:ad:
                    05:db:03:9c:0b:84:72:c9:7d:f6:a1:96:70:c1:25:
                    0d:73:34:f5:ad:ee:b8:74:59:48:13:dd:50:bd:57:
                    fd:51:95:10:70:35:18:9c:fc:dd:36:b7:2d:b7:2c:
                    e8:08:c4:f2:21:1b:47:2e:07:7c:db:48:22:e5:ba:
                    51:ae:45:3c:03:8e:85:f9:43:f2:96:d3:43:97:32:
                    90:00:b3:c1:9a:6a:22:7d:52:49:74:83:99:e6:e9:
                    56:a0:1e:44:63:1f:b0:d0:9b:45:3c:8c:b8:16:ee:
                    aa:48:d4:4d:32:31:7b:37:02:7c:4f:15:cd:e2:ad:
                    b5:4f:2d:c9:a5:f4:95:45:2c:0b:e2:48:07:8a:5f:
                    c2:da:88:64:83:4b:20:51:9e:c0:b5:28:93:0d:47:
                    39:8b:e2:c8:74:be:45:61:e6:c9:bd:26:cf:3f:e4:
                    7f:eb:68:63:49:60:24:eb:22:6d:65:89:dc:97:bf:
                    ce:50:cf:1f:c2:08:72:d3:f6:af:e6:97:16:df:da:
                    c3:f7:34:65:29:28:a3:84:dd:7a:04:b6:b4:d6:aa:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C0:64:39:69:FA:5A:57:75:8D:4D:FE:C6:9A:41:13:80:55:38:D2
            X509v3 Authority Key Identifier:
                keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232312e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:3f:7d:76:94:54:63:0f:d5:07:80:2c:b4:69:4c:32:80:
         41:e6:bd:d6:73:ac:06:31:eb:10:d7:7f:62:ad:2f:da:53:97:
         17:cb:4d:a7:f0:bd:ff:63:bc:73:d3:87:a5:7e:e8:5f:d9:b9:
         5d:46:42:9d:df:f1:78:0d:47:63:78:63:58:b5:30:5d:55:ee:
         c2:11:d0:4e:c7:9a:1e:d5:1f:72:b5:c4:f2:19:73:3c:88:b0:
         df:4a:d4:c5:69:f4:3d:69:be:c3:87:d6:4a:d6:85:7f:8f:f4:
         7b:a2:d5:c8:0e:fb:d5:1c:10:bb:7f:3d:78:b8:f2:07:b3:7f:
         fc:26:6d:1c:36:f8:db:2f:ef:82:94:94:a8:1d:aa:c5:93:58:
         ac:50:99:6c:03:41:a5:2f:81:e7:cb:ba:dd:44:ae:23:6e:e5:
         aa:a0:38:50:d3:85:a1:87:92:79:1e:82:43:86:aa:db:c2:13:
         83:84:84:bf:da:d0:41:c0:b9:09:63:a4:46:3c:e0:15:b4:96:
         1d:9c:d9:aa:28:f2:be:aa:12:eb:30:8b:95:af:6f:b4:ef:32:
         e4:1b:c1:4f:83:31:0d:b8:16:88:9d:68:8b:78:57:40:2d:85:
         e1:43:09:db:74:3a:65:4b:89:b4:f5:9e:48:3e:6a:be:73:45:
         20:0c:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org